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CN ! Abstract 

(N ■ 

Secrecy graphs model the connectivity of wireless networks under se- 
crecy constraints. Directed edges in the graph are present whenever a 
P^ I node can talk to another node securely in the presence of eavesdroppers. 

CLj ' In the case of infinite networks, a critical parameter is the maximum den- 

sity of eavesdroppers that can be accommodated while still guaranteeing 
an infinite component in the network, i.e., the percolation threshold. We 
Cu ■ focus on the case where the location of the nodes and the eavesdroppers 

are given by Poisson point processes. We present bounds for different 
types of percolation, including in-, out- and undirected percolation. 



^ ! 1 Introduction 



To assess the impact of secrecy constraints in wireless networks, we have re- 



T^lj- ■ cently introduced a random geometric graph, the so-called secrecy graph, that 

I ■ \ represents the network or communication graph including only links over which 

f— ^ ■ secure communication is possible [8^. 

We assume that a transmitter can choose the rate such that it can commu- 
nicate to any receiver that is closer than any of the eavesdroppers. This way, 
the secrecy constraint translates into a simple geometric constraint for secrecy. 
. - Natural topics for investigation include the degree distributions and the thresh- 

r> ' old at which infinite components cease to exist. Since the resulting graph is 

jrt ' directed, there are different types of components, including in-, out-, and undi- 

rected components. In each case, the percolation threshold (in terms of the 
density of eavesdroppers) is different. 

In this paper, we give an overview of the progress made in the last three 
years on the percolation thresholds for secrecy graphs, introduce new methods, 
and present improved bounds for the case where nodes and eavesdroppers form 
independent Poisson point processes. 
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2 Model 

Our model is as follows. Let V and V' be independent Poisson processes, of 
intensities 1 and A respectively, in W^. The case d = 2 provides a good example. 
We will call the points of V black points and the points of V' red points. Now 
define a directed graph, the directed secrecy graph Ggoc, on vertex set V, by 
sending a directed edge from x € V to y € V \i there is no point oiV' in the 
open ball D{x^ \\x — y||) centered at x with radius ||x — y\\. Note that it makes 
no difference whether we consider open or closed balls since, with probability 1, 
there are no two points oiV UV' at the same distance from any point of V. 

The motivation for this construction is that x € V can send a message to 
y (z V without being overheard by an eavesdropper from V' . For more details, 
see |8J, where the model was originally defined. 

Our main aim in this paper is to study the critical value (s) of A for various 
types of percolation in Gscc in the plane (precise definitions will be given later). 
We will also make some comments about the situation in higher dimensions. 

Let us remark that the indegree and outdegree distributions in Gscc have 
been obtained in [TB] and [S] respectively. We summarize the results below. 

Theorem 1. The outdegree distribution in Gscc is geometric with mean 1/X, 
and the indegree I has moment generating function 

E{e") = E(p7''('='-i)/^), 

where Vd is the random variable representing the volume of a randomly chosen 
cell in a Voronoi tessellation associated with a unit intensity Poisson process in 
W^. Equivalently, if fd{t) is the probability density function ofVd, then 

F{I = k) = -J fd{t)e-'/\tl\fdt. 

Proof. Fix a vertex x G V. Label the points of P U 7-" \ {x} = {j/i, 2/2, • ■ •} in 
order of increasing distance from x. Now x has outdegree k if and only if the 
k nearest points yi, . . . ,yk to x belong to V and yk+i S V. The probability of 

this is I YTT ) TXT • Consequently, the outdegree distribution is geometric with 
mean 1/A. 

For the indegree distribution, we again fix x G V, and temporarily rescale 
the model so that V and V' have intensities 1/A and 1 respectively. This does 
not affect either degree distribution. The vertex x has indegree k if and only 
if there are exactly k points of V in the Voronoi cell C defined by V' U {x} 
containing x. If C has volume V, then 

P{CnV = k)^ jfe~^/^{V/\f. 

The result follows. D 

Unfortunately, fd{t) is only known when d — 1, when fi{t) — 4ie^^*. Conse- 
quently, the indegree distribution in Gscc remains unknown for d > 2. However, 
its mean is of course 1/A in all dimensions. 



3 Percolation 

For a model of an infinite undirected random graph., percolation is said to occur if 
an infinite component occurs with positive probability. (In fact, this probability 
is almost always 1 by Kolmogorov's 0-1 law - see Theorem [5J) Since Gsec 
is a directed graph, there are several things we could mean by "component", 
which lead to several definitions of percolation. Following P] , we distinguish five 
distinct events. First, write Gscc for the undirected graph obtained from Gsec 
by removing the orientations of the edges and replacing any resulting double 
edges by single edges, and G'^^^ for the undirected graph obtained from Gscc by 
including only those edges xy for which both xy S Gscc and y'x G Gsec- We 
write U for the event that Gscc has an infinite component, O for the event 
that Gsec has an infinite out-component, I for the the event that Gscc has 
an infinite in-component, S for the event that Gsec has an infinite strongly 
connected subgraph, and B for the event that Gggc has an infinite component. 
Here, an out (resp. in)-component is a subgraph with a spanning subtree whose 
edges are all directed away from (resp. towards) a root vertex, and a strongly 
connected subgraph is one where there are directed paths from x to y for all x 
and y in the subgraph. As noted in JT, we have the following implications: 

B ^ S ^ (I and O), (I or O) ^ U. (1) 

Let X denote any of U, O, I, S or B, and let px(A, d) = P(X). 

Theorem 2. For all values of X and d, and all choices ofK., px(A,(i) is either 
or 1. 

Proof. Let E be the event that Gscc has an infinite X-component. By Kol- 
mogorov's 0-1 law, it is enough to show that E \s & tail event, meaning that, 
for all K > 0, E depends only on vertices at distance greater than K from the 
origin O. Fix K > 0. Then, for any e > 0, there is a K^ > K such that the 
probability that there exists a vertex at distance at least K^ from O that is not 
prohibited by V' from sending a directed edge to some vertex within K of the 
origin is less than e. This is because one can calculate the expected number 
of black vertices v at distance at least L from O whose nearest red point is at 
distance more than ||w|| — K as 
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where Sd = 2n'^/'^ /T{d/2) and aj, = n'^/'^ /T{1 + d/2) are the surface area and 
volume respectively of a unit d dimensional ball. The integrand above is a 
polynomial times a (super-) exponentially decreasing function, so the integral 
converges. Hence the integral can be made less than e by suitable choice of L. 
Note that this probability is taken over the restriction oiV^V to W^\D{0, K). 
Now, for each choice of X, X-percolation is unaffected by the removal of a 
finite number of vertices. Also, with probability 1, there are only finitely many 



vertices within distance K^ of the origin. Consequently, up to probability zero 
events, E is also the event that there is an infinite component in Gi, the directed 
graph obtained from Gsec by removing all vertices of V inside B{0, K^) and all 
edges incident with them. But, with probability 1 — e, taken over the restriction 
of 7-" U 7-" to R'' \ B{0,K), this does not depend on points within distance K 
of the origin. Since this holds for all e > 0, -E is, up to a set of probability 
zero, equal to an event that does not depend on points within distance K of the 
origin. Consequently, E' is a tail event. D 

An alternative proof of Theorem [5] proceeds by noting that the Poisson pro- 
cess is ergodic and that percolation is translation invariant, so automatically has 
probability either or 1. We have given a complete proof from first principles, 
since the proof of Theorem [531 niakes use of a similar technique (among other 
ingredients) . 

Since, for a fixed instance of V, adding points to V' can only remove edges 
from GsGc, the probability px(A, d) is non-increasing in A. Define the critical 
intensity Ax,d by the formula 

Ax,d = inf{A : _px(A, d) = 0} = sup{A : px(A, d) = 1} 

and write (just for this paper) Ax — Ax, 2- We reiterate that increasing A 
decreases the probability of percolation, in our formulation of the model. From 
(1), we have 

Ab < As < min{Ai, Ao}, max{Ai, Ao} < Au- (2) 

Our first aim is to provide bounds on Ax- While doing this, we survey 
various methods that have been used for other continuum percolation models. 
All of these are from [7], [11] and [15], on percolation in the Gilbert disc model, 
and from 2 and flOj, on percolation in the /c-nearest neighbour model. 

3.1 Branching processes (|[7|, [10], m], [15]) 

For both the Gilbert disc model and the fc-nearest neighbour model (the "tradi- 
tional models"), the basic method is as follows. We start with a vertex x of V, 
grow the cluster containing x in "generations" , and compare the growing cluster 
to a branching process. For the most natural way of doing this (details below), 
the branching process has more points than the cluster, so, in all dimensions, 
if the branching process dies out, so will the cluster. We can now use classical 
results which tell us when certain branching processes die out. Consequently, 
in all dimensions, branching processes give lower bounds for thresholds in the 
traditional models, i.e., they show that for certain parameters, percolation does 
not occur. 

In the following, we will describe the method for the Gilbert disc model, 
although it is almost the same as for the fc-nearest neighbour model. Assume 
that the origin O is a point of V. First pick the points of V within distance 
r of O - these are the first generation. The second generation are the points 



of V which are each within distance r of some first generation point, but are 
not in the first generation themselves (i.e., they are not within distance r of 
O). The third generation are the points of V not belonging to the first two 
generations, but which are each within distance r of some second generation 
point, and so on. The associated branching process is obtained by setting each 
offspring size distribution to be Po(7rr^), so that we are essentially growing the 
same cluster containing O, but ignoring the fact that the various discs we have 
scanned for points actually overlap. In [7], Gilbert argues that if 7rr^ < 1, 
the branching process dies out with probability 1, so that the critical area for 
percolation is at least 1. When irr^ > 1, it is possible to calculate (numerically) 
the probability that the branching process dies out, so this gives an upper 
bound on the probability that O belongs to an infinite component. Gilbert also 
notes the following improvement. The discs surrounding a point of V and its 
descendant in V always intersect in an area of at least a = (|7r — ^)r'^ , so we 
can compare with a branching process whose offspring size distribution is just 
Po((7r — a)r^). This leads to the improved lower bound of —^ ~ 1.642, which 
was further improved to 2.184 by Hall [11] using multitype branching processes. 
In Hall's method, the type of a child is just the Euclidean distance to its parent: 
children of higher types are likely to have more descendants. We include a brief 
description of Hall's modification later. 

This method can be used to give an upper bound of Aq < 1 for the secrecy 
graph model. In fact, for oriented out-percolation, we have the following result. 

Proposition 3. The probability Ooi^) that O belongs to an infinite out-component 
in the secrecy graph satisfies 

6*0 (A) <max{0, 1- A}. 

Proof. As in the above proof sketch, we compare the growing cluster, starting 
at a black point p £ V , with a branching process. The number of children in 
the first generation has distribution given by a geometric random variable with 
mean 1/A. After the n"^ generation has been completed, we order the points 
of the n^^ generation in order of distance from p, and begin growing a ball 
around each point in turn (according to the order). For each black point x, 
there are two possibilities. First, the ball corresponding to x might encounter 
a red point which has already been encountered. If not, the ball will certainly 
outgrow the region R already scanned (by points in previous generations, or 
the current generation). In this case, the number of black points outside the 
region R that we encounter before the first red point (which stops the ball) will 
again have a geometric distribution with mean 1/A. Consequently, the number 
of children of a black point is always stochastically dominated by a geometric 
random variable with mean 1/A, and generating function f{x) = ia_x_j. ■ ^ 
branching process whose offspring size distribution is given by this geometric 
random variable has extinction probability 1 if A > 1 , and extinction probability 
A if A < 1. (When A < 1, the extinction probability is given by the smallest 
root of x — f{x).) Consequently, the cluster stops growing with probability at 
least A, and so 6o{\) < 1 — A. D 



In higher dimensions, the cluster is approximated better and better by the 
appropriate branching process, at least for the Gilbert and fc-nearest neighbour 
models. This is because the distances from a point p £ V to its two nearest 
neighbours in V converge in distribution to a (common) deterministic limit, and 
because the overlap between the balls centered at a parent and at its child gets 
smaller and smaller, as d — >■ oo. There is a slight complication in that the error 
(between the model and a branching process) is only asymptotically negligible 
over finitely many generations. Therefore, in both [TU] and [TS], oriented lattice 
percolation is brought in to establish asymptotic thresholds for percolation. The 
results are that in sufficiently high dimension, k = 2 gives percolation for the 
fc-nearest neighbour model, and that the critical volume in the Gilbert model 
tends to 1 as d — > oo. 

For the secrecy graph, we have 

Theorem 4. If X > 1, then, for all d, 6'o,d(A) =0. //A < 1, then Oo.dW ^ 
1 — A as d ^ oo. 

The first part of the theorem follows from the above proposition, so we assume 
from now on that A < 1. 

We will prove this theorem in a series of steps, and we will utilize five different 
branching random walks. The first is the process (XjJ). We define XjJ to be 
the single point at the origin in R'', which we will suppose belongs to V. X^ 
is the set of points of V that are closer to XjJ than any point of V' , ordered 
according to modulus. Thus the points in X^ are the out-neighbours of XfJ 
in Gsec- We generate the set X2 by examining the points of X^ in order, and 
growing a ball around each one, capturing black points until the first red point 
is encountered. We call this scanning around the points of X^. After we have 
scanned around each point of X^, the newly-captured black points (i.e., those 
not in Xq UX^) form X2. Thus X2 is the set of out-neighbours of the points of 
X^ in GsGc that are not out- neighbours of XjJ. This time, we order the points 
of X2 according to the order in which they were captured, i.e., they inherit the 
order of their parents in X^, and, within sibling groups, they are ordered by 
distance to the parent. The set X3 , of not-already encountered out-neighbours 
of X2 , is generated in the same way, and the same ordering is imposed upon its 
members. Continuing in this manner we obtain (XjJ). Of course, it is entirely 
possible that this process terminates after a finite number of steps. 

As we have already remarked, as d — >■ 00, this process more and more re- 
sembles the following one. We set Yq to be the single point at the origin in 
R'', as before. The set Y^ is the set of out-neighbours of YfJ in Gsoc, again 
as before. However, to generate Yj, we use a different procedure. Examining 
the points of Y^* in order of modulus, for each point, we generate entirely fresh 
copies of V and V , and for each point y S Y^, the children of y in Y2 are the 
out-neighbours of y in this new copy of Gsoc, once again ordered by distance 
to the parent. We continue in this manner to obtain (Y^): each time we scan 
around a new point, we use a fresh copy of V and V', and the ordering on the 
points within each generation is as before. This process might also terminate 



after a finite number of steps. 

Tiiis process can be coupled with tlie previous one: to get an instance of 
a subtree of Gsec from an instance of (YjJ), we simply throw away some of 
the black points, along with their descendants. There are two types of black 
point which need to be discarded. Firstly, any black point among the process 
(YjJ) which was born inside a previously scanned region must be excluded from 
(X^). Secondly, while scanning about a point y e (Y^), we stop when we hit 
the first red point of the new instance of V' we are using. However, we might 
encounter an old red point, from the original instance of V', first. For the sake 
of generating (X„), this is where the scanning around y must stop. Hence we 
must discard all black points captured after this old red point was encountered. 
Owing to the existence of fresh red points in already-scanned regions, we might 
actually never obtain some points of the original process (XjJ), but the new set 
of points will certainly be a subset (if not a subtree) of (XJ^). 

One thing is clear, however: if, in, say, the first k generations of (YjJ), no 
point (either black or red) is born inside a previously scanned region, and if no 
previously encountered red points are encountered during the scanning, then 
the processes (XjJ) and (YjJ) will coincide for the first k generations. We will in 
fact show that, for fixed k, the probability of this tends to 1 as d — > oo. First, 
however, let us remark that the distribution of generation sizes in the process 
(Y^) is known completely. For this, the spatial locations of the points of (Y„) 
are irrelevant: all that matters is that the individuals in (YjJ) form a branching 
process, whose offspring distribution is geometric with mean /i = 1/A > 1. 
Consequently (see, for instance [19]), 

(3) 
(Here, the asymptotics are as n — >■ oo, with /i and j fixed.) The expected size 
of the n*^ generation is /x", and its mass function is geometric, except for the 
first term. Moreover, the extinction probability is A = l//x, corresponding to 
the percolation probability 1 — A. The idea of the rest of the argument is that 
we can essentially let A: — >■ oo in the preceding discussion, even though, for any 
fixed d, the processes (X„) and (YjJ) will eventually differ with probability 1. 

To compare the processes (XjJ) and (YjJ) over the first k generations, we 
will use the following well-known lemmas. To simplify their statements, we will, 
following 10 and [15^, scale the processes V and V' so that they have intensities 
l/ofrf and X/a^ respectively, where a^ = 7r''/^/r(l + d/2) is the volume of a unit 
d dimensional ball. This doesn't affect the graph Gscc- 

Lemma 5. Let di, for 1 < i < t, he the distance of the i*^ nearest point of V 
to the origin in W^ . Then, as d —^ oo, di — > 1 m probability. 

Lemma 6. Let Bi and B2 he balls in W^ of radii ri,r2 E (0.9, 1.1). Suppose 
that the centers of the Bi are at least 0.9 units apart. Then, as d ^ 00, the 
proportion of the volume of Bi which lies inside B2 tends to zero. 



Let us see how these lemmas are applied. Fix y e Y|J. Firstly, by Lemma [51 
all the children yi, . . . ,yt of y lie at distance approximately 1 from y, as d — ?► oo. 
Secondly, by Lemma [Bl the yi are at distance more than 1 from each other, 
and from the nearest red point z (which is also at distance about 1 from y). 
Write B = B{y, \\z — y\\), so that B is the ball generated about y while scanning 
for children. Now, while scanning around the children yi of y, we generate 
certain balls Bi of radius approximately 1, centered at the j/i, which are stopped 
by red points Zi. The balls Bi will intersect each other, and naturally they 
will all intersect B. However, again by Lemma [HI the volumes of all these 
intersections will be negligible compared to the volumes of the balls themselves. 
Consequently, the yi are very likely to have disjoint sets of children, all born 
outside B, and each of the balls Bi will be stopped by a different point Zi ^ z, 
which will also lie outside B. This argument can clearly be carried out for a 
fixed number k of generations. (Incidentally, the edge between a child and its 
parent will be almost orthogonal to each of the edges joining the same child to 
its own children, so the points of Y^ will all lie at about distance about \/k 
from Yq, when d is large.) 

The upshot of this is the following fact, which will be central to all that 
follows. 

Lemma 7. Fix e > and k > 1. If d> dQ{e, k), then the probability that (XjJ) 
and (YjJ) differ in the first k generations is less than e. 

The next step is to project the points of (YjJ) onto M^ using the map L : 
W^ ->■ R2 defined by 

L{xi,...,Xd) = Vdixi,X2)- 
The reason for the factor y/d is the following lemma, taken from [10] . 

Lemma 8. Suppose Y is uniformly distributed on the surface of the ball of 
radius 1 in R . Then, as d —> oo, the random variable Z = i(Y) converges 
in distribution to the bivariate normal distribution N(0,I) with mean zero and 
covariance matrix equal to the 2x2 identity matrix I. In other words, the 
density function of Z converges pointwise to 

1 / z? + z2 



fizi,Z2) = --exp 



2tt ' \ 2 

as d —> oo . 

Proof. The proof of an almost identical statement appears in [15 , and the re- 
sult is well-known, but we sketch the proof nonetheless. If Xi, X2, . . . , Xd are 
independent iV(0, 1) random variables, then the d-dimensional random vector 
X — {Xi , X2, . . . , Xd) € M'' has density function 

-L / X-\ ~\~ Xn 



/rf(xi,X2,...,a;rf) = -^^^^exp 

which is radially symmetric. Moreover, using Chebyshev's inequality, we see 
that glXp ~ 3(^1 + • ■ ■ + X'^) converges in probability to 1 as d — >■ 00, and 



so ^X converges in distribution to Y. Consequently, the distribution of the 

first two coordinates of ^/dY converges (in distribution) to that of (Xi,X2), as 
stated in the lemma. D 

Write (Zn) for the result of projecting the process (Y^) from M'* to M^ using 
the map L, and write (Z^) for the process in which the offspring size distribution 
agrees with that of (Zn) and (Y„) (i.e., is geometric with mean 1/A), but 
where the offsets of each child are independent N{0,I) random variables. The 
preceding lemma shows that the processes (Z^) and (Z^) resemble each other 
more and more as d — >■ oo. Consequently, we will study the process (Z^) first, 
and draw conclusions about the other processes later. 

Rather than consider the entire process (Z^), we will use a "truncated" 
version, and compare with oriented site percolation on the lattice A = {{i,j) S 
Z^ : i > 0, \j\ < i,i + j & 2Z}, with oriented edges from {i,j) to {i + 1, j ± 1). 
Each site («, j) of A will correspond to a square 

S,,, = [M{t - 1/2), M{t + 1/2)] X [M(j - 1/2), M(j + 1/2)] 

in M^, where M is a large integer which we will choose later. Since the oriented 
percolation probability is left-continuous at 1 (see [6], for instance), we may 
choose (5 > such that, for oriented site percolation on A with parameter 
p > 1 — 3(5, the oriented percolation probability (of the event that there is an 
infinite directed path starting from the origin) is greater than 1 — e/2. 

A site {i,j) in the oriented percolation process will be deemed Z°°— open if 
we can proceed to both {i + l,j — l) and (i + l, j + l) from it. However, "proceed" 
will mean different things in the cases ij — and ij ^ 0. Assume, as before, 
that the point Z^ lies at the origin. The site (0, 0) will be Z°°— open if and only 
if Z^ has at least m descendants in generation fci within the square 5*1^-1, and 
at least m descendants, also in generation fci, within the square 5*1^1. We will 
only test a subsequent site (i, j) for Z°°— openness if at least one of (i — 1, j + 1) 
or (i — l,j — 1) is Z°°— open. If at least one of these two sites is Z°°— open, 
then we know that there are m points zi, . . . , z^ of (Z^) in Stj. (If there are 
more than m such points, for definiteness let zi, . . . ,Zm be the closest ones to 
the center of the square.) Site {i,j) will be Z°°— open if and only if zi, . . . , Zm 
have at least m descendants in generation fc2 (counted from the Zi, not from 
Zg°) in 5,;+i.j_i, and at least m descendants in generation fc2 in Si+i,j+i. We 
require lower bounds on the probabilities of sites being Z°°— open, and these 
are provided by the following lemmas. 

Lemma 9. Fix A < 1, (5 > and ni > 1. There exist positive integers fci(A, 6, m) 
and M(X,d,m) such that, with the above definitions, the probability that (0,0) 
is 71°° — open is at least 1 — A — (5. 

Proof. Since the proof of an almost identical statement appears in |10| (only the 
offspring size distribution is different), we will just sketch the argument. For 
A < 1, the branching process is supercritical, and by ([3|) we can find a generation 
fc3(A, 5, m) so that the probability that there are, say, N = N{X, S, m) members 



in generation fca is at least 1 — A — (5/4. These N individuals zi, . . . ,zn will all be 
at distance about -x/fca from the origin, and we can ensure that, with probability 
1 — A — (5/2, they all lie within distance M = \2^/k3\ of the origin. If we run the 
process for another M^ generations, then about XN of the Zi will not have any 
descendants in generation k^ + M"^ . However, if we pick a random descendant of 
each remaining Zj in generation k-^ + M^, there is a constant probability that it 
will land in Si^i or Si,-i, since this descendant will lie about distance M from 
Zj, which in turn lies within distance M from the origin. Consequently, from 
the independence, if N is large enough, we will have, with probability at least 
1 — A — (5, at least m descendants of Zjf in generation fci = fca + M^ in each of 
Si^i and Si^-i. D 

A similar argument establishes the following lemma. 

Lemma 10. Fix A < 1 and (5 > 0. Then there exist positive integers 

m(A,(5),fci(A,5),fc2(A,(5) and M{X,6) 

such that, with the above definitions, the probability that (0,0) is X°°^open is 
at least 1 — X— 6, and the probability that a site {i,j) with ij ^ is 7i°° — open 
is at least 1 — (5. 

Define Z— openness in the obvious manner, using the process (Zn) rather 
than (ZJ^). The following lemma follows from Lemma [TU] and Lemma |S1 

Lemma 11. Fix A < 1 and 6 > 0. Then there exist positive integers 

m{X,S),ki{X,d),k2iX,S),M{X,6) and d{X,S) 

such that, with the above definitions, the probability that (0,0) is Zi—open is at 
least 1 — X — S, and the probability that a site {i,j) with ij ^ is Z—open is at 
least 1 — (5. 

If we could draw the same conclusion for the projection of the process (X^), 
we would be done. However, the process (XJ^) is harder to analyze, owing 
to possible interference between steps. To be specific, denote by "step (i,j)" 
the procedure whereby we determine, for the projection of the process (XjJ), 
whether or not the site {i,j) is W— open. (Here, (Wn) will be the projection 
of a suitably modified version of (XjJ).) It is possible that, during step {i,j), 
a black point (or a red point) is born in a region that was scanned as part of 
a previous step («',/). It is also possible that a red point, discovered in some 
previous step (?',/), is encountered in step {i,j). We need to show that both 
of these possibilities can be neglected. 

For the remainder of the proof, 5 and A will be fixed. Write k — maxjfci, ^2}. 
The first step is to show that we may assume that, in the first k generations of 
(XjJ), the total number of descendants is bounded by an absolute constant N, 
the total volume scanned is bounded by an absolute constant V, and the distance 
of the L— projection of any point from the origin (in R^) is at most an absolute 
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constant R. (Here, these "absolute constants" might depend on the (fixed) 5 
and A, but they don't depend on d.) Indeed, the probabilities of the failures 
of these conditions can each be made arbitrarily small by taking iV, V and R 
suitably large. If any of them fail, we modify the process (XjJ) to terminate at 
the first failure, and deem step (i, j) to be a failure. We denote by (Wn) the 
L— projection of this modified process to M^. The preceding discussion, together 
with Lemma [71 proves the following. 

Lemma 12. Fix 5 > Q and fc > 1. If d > di{S,k), then the probability that 
(Wn) and (Zn) differ in the first k generations is less than d. 

To summarize, we have dealt with two ways in which step («, j) could fail: 
the processes (Wn) and (Zn) might differ, or (Zn) might fail to proceed to both 
iSi-i-ij-i and 5i+i.j+i for some reason involving only the fci or ^2 generations 
corresponding to step (i,j). To these we must add two more: the step might 
fail because a black or red point might be born in a previously scanned region 
(from a step (i',j')), or a previously discovered red point (from a step (i',j')) 
might be encountered. If we can show that the probability of each of these two 
events can be bounded by 6, we will be done. The following lemma does just 
this. We modified the process (X|J) to facilitate the proof of this lemma. 

Lemma 13. Let the process (Wn) be defined as above. Then, during the step 
(i,j), the probability that either a black or a red point is born in a region scanned 
in a previous step, or that a red point from a previous step is encountered, is at 
most 5. 

Proof. Consider a previous step {i',j'), and suppose that {Mi' , Mj') is at dis- 
tance X ^ 2R from {Mi,Mj). The total volume scanned in step {i',j') is at 
most V, and, if a; > D is sufficiently large, at most 6' /x^ of this volume falls, 
when projected, within distance M + R from the center {Mi, Mj) of Si,j. Sum- 
ming over all square centers {Mi' , Mj') at distance more than D from {Mi, Mj), 
the total previously scanned volume from these distant steps which falls, after 
projection, within distance M + R from {Mi, Mj) is at most 6' . Since there are 
at most N individuals in step {i,j), we can choose 5' (and hence D), so that 
the probability that a black or red point from step {i,j) is born in this region of 
volume 6' is at most S/3. Similarly, the probability that, while scanning in step 
{i,j), we hit a previously encountered red point from a distant step is at most 
6/3. For the steps at distance at most D, we can bound the probability of failure 
of either type by 6/3, because only boundedly many steps are involved. D 

Together, the last three lemmas prove the following one. 

Lemma 14. Fix A < 1 and 6 > 0. Then there exist constants 

m(A, 6), fci (A, 6), fc2(A, 6), M{X, 6), N{X, 6), V{X, 6),R{X, 6) and d{X, 6) 

such that, with the above definitions, the probability that (0,0) is W—open is at 
least 1 — A — 26, and the probability that a site {i,j) with ij ^ is "W—open is 
at least 1 — 36. 
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It only remains to put the pieces together. Given e > 0, we choose S < e/4 
so that, for oriented site percolation on A with parameter p > 1 — 56, the 
oriented percolation probability (of the event that there is an infinite directed 
path starting from the origin) is greater than 1 — e/2. From the previous lemma, 
we find an infinite directed W— path from the origin, corresponding to an infinite 
out-component in Gsoc, with probability at least 

(1 - A - 25)(1 - e/2) > (I - A - e/2)(I - e/2) > I - A - e, 

as required. This completes the proof of Theorem 21 

The method seems to be tailored for oriented out-percolation, so we expect 
it won't give bounds for other types of percolation, except via equation (2). 
In two dimensions, it should be possible to improve the bound in Proposition 
3 using Hall's modification, which, for the disc model, runs as follows. Each 
offspring y is indexed by its distance t to its parent a;, and its offspring size 
distribution is bounded in terms of the area of the lune D(y,r) \ D{x,r). In 
addition, the distribution of the types of these offspring is also bounded in terms 
of the same lune. Consequently, one can compare the growing cluster with an 
appropriate multitype branching process (the types are indexed by t). For 
the secrecy graph, there are three parameters one might wish to keep track 
of (instead of just one). These are: the radius r of the disc centered at x, 
the distance t of a; to its offspring y, and the location of the red point z on 
the boundary dD{x,r) of D{x,r). Nonetheless, one could in principle compute 
the appropriate conditional probability distribution and this should result in a 
slightly improved upper bound. 

To summarize, although branching processes are usually employed to show 
that percolation does not occur in these models, they can also be used to show 
that percolation does occur ior certain fixed values of the parameters, as d — > oo. 
For the secrecy graph model, it would be interesting to investigate the case 
A = I , as d — > oo . 

3.2 Lattice percolation ([7], [10], [H], [171 , W) 

Two variants of the basic method, applied to the Gilbert model, are described 
in Gilbert's original paper [7]. For both variants, fix a connection radius r. 
First, if we consider the square lattice with bonds of length r/2, and make the 
state of a bond e open iff there is at least one point of V in the square whose 
diagonal is e, then bond percolation in the lattice implies percolation in the 
Gilbert model. Second, if we consider the hexagonal lattice where the hexagons 
have side length r/^/T3, and make the state of a hexagon open iff it contains a 
point of V, then face percolation in the hexagonal lattice implies percolation in 
the Gilbert model. Using the fact that the critical probabilities for both bond 
percolation in the square lattice and face percolation in the hexagonal lattice 
are equal to 1/2, one thus obtains upper bounds on the critical area 7rr^ of 
about 17.4 and 10.9, respectively. The latter value was improved to 10.588 by 
Hall [11] using "rounded hexagons" . 
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Haggstrom and Meester [TU] used this method to show that, for fixed d, 
percolation occurs in the /c-nearest neighbour model for sufficiently large k. 
Pinto and Win [T7] (see [IH] for more details) applied it to show that percolation 
occurs in all versions of the secrecy graph model when A is sufficiently small. 
For the latter application, one needs to use dependent percolation, which means 
that the bounds are rather weak. In the same paper, Pinto and Win prove 
an upper bound on Au, also using lattice percolation. Their method is to tile 
the plane with regular hexagons, each of side length 6. Divide each hexagon 
into 6 equilateral triangles in the obvious way. Set the state of a hexagon to 
be closed if it contains no black points and at least one red point in each of 
its 6 triangles, and open otherwise. If the probability g{X, S) of this is at least 
1/2, the critical probability of face percolation on the hexagonal lattice, then 
the origin will almost surely be surrounded by arbitrarily large closed circuits. 
It is easy to check that an edge of Gsoc cannot cross a closed circuit, and so 
percolation will not occur in Gsoc if 3(A, S) > 1/2. Now 

g(A,(5) = (l -e-^^^'/4)%-3v^^'/2, 
and, for fixed A, we maximize g{X,d) by setting 



1 + A' 
so the smallest value of A for which 

A \V 1 \'/' 1 
> 



1 + Ay Vi + ^/ ~ 2 

will be an upper bound for Au . The last equation can be solved numerically to 
yield the bound Au < 40.9. The method can easily be modified to give bounds 
for the other Ax, but we expect that the results will be rather weak. 

In summary, lattice percolation has generally been used to show that perco- 
lation does occur in these models, although Pinto and Win also used it to show 
that percolation does not occur in the secrecy graph if A is sufficiently large. 

3.3 The rolling ball method ([l2]) 

This is a method designed to show that percolation does occur for certain pa- 
rameter ranges in various models. It was applied in [5] to prove upper bounds 
for critical values of k in the fc-nearest neighbour model. Unfortunately, when 
applied to the Gilbert disc model, it only yields an upper bound (on 7rr^) of 
about 12, worse than the previously best known bound. 

The method involves comparison with 1-independent percolation and carries 
through almost entirely for the secrecy graph. We will only need to modify some 
of the equations from ^: however, for completeness, we include a full account 
of the method here. First, we state precisely what we mean by a 1-independent 
percolation model. 
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Figure 1: The rolling ball method 

Definition 15. A bond percolation model on 1? is said to be 1-independent if, 
whenever Ei and E2 are sets of edges at graph distance at least 1 from each 
other (i.e., if no edge of Ei is incident to any edge of E2), the state of the edges 
in El is independent of the state of the edges in E2 . 

We will use the following theorem about such models, proved in [3l. 

Theorem 16. // every edge in a 1-independent bond percolation model on Z^ 
is open with probability at least 0.8639, then, almost surely, there is an infinite 
open component. Moreover, if B is a bounded region of the plane, there is, 
almost surely, a cycle of open edges surrounding B. 

We will use the first part of the theorem for our lower bounds, and the second 
part for our upper bounds. 

For simplicity, let us first consider the case of B-percolation. Later, we will 
indicate the modifications necessary for the other types. 

Consider the rectangular region consisting of two adjacent squares S, T 
shown in Figure [TJ Both S and T have side length 2r + 2s, where r and s 
are to be chosen later. Also, T may be to the right, left, above or below S, in 
which case Figure [T] should be rotated accordingly. We define the basic good 
event £'b,S',t to be the event that every black point u in the central disc K oi S 
is joined to at least one black point in the central disc M of T by a path in G'^^^, 
regardless of the state of the Poisson processes outside SUT, and moreover that 
K contains at least one black point. 

Now consider the following percolation model on Z^. Each vertex {i,j) G Z^ 
corresponds to a square [Ri, R{i+1)] x [Rj, R{j+1)] in R^, where R = 2r+2s, and 
an edge is open between adjacent vertices (corresponding to squares S and T) 
if both the corresponding basic good events E^^s,t and E^t.s hold. Note that 
this is a 1-independent model on Z^ , and that percolation in this model implies 
percolation in the original one. Since, by Theorem I16[ the critical probability 
for any 1-indepcndent model is at most 0.8639, if we can show that, for some 
r, s. A, 

HEb,s,t) > 0.93195 
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it will follow that 

P(-Eb, s,T n Sb,t,s) > 0.8639 
by symmetry, and hence we will have shown that Ab > A. 

To bound the probability that a basic good event fails, we proceed as follows. 
Let K, L and M be as in Figured] {L is the region between the two discs K and 
M.) Define E^ g. ^ to be the event that for every black point v G K U L, there 
is a black point u such that i) uv G E{Gg^^) ii) \\u — v\\ < s and iii) u G -D„, 
where D^ is the disc of radius r inside KULUM with v on its iiT-side boundary 
(the middle disc in Figure [1]) . If we let Fs be the event that there is at least 
one black point in K, then we have (see [2] for background) 



^B S T 1^ -^S C Eb,S,T 



and so 



^B,S,T C (-E^B, s,t) U Fg 

so that, since P((£'b s t)'^) i^ bounded by the expected number of points v such 
that i), ii) or iii) fail, 

P(^E,s,t) < e"""' + 2r(2r + 2s)pB,r,s 

where p-B.r,s is the probability that i), ii) or iii) fail for some fixed v. 

To bound pB,r,s, we consider the probability that the vertex u closest to v 
inside D^ fails one of i), ii) or iii) (or does not exist). Suppose some u g D^ does 
exist, and write i = ||u — w||,A = B{v,t),B = B{v,t) n Dy and C — B{u,t). 
Let Pb(w) be the probability that u is the closest point to v inside Z)„, but that 
uv ^ G'^^^. Then 

PB(^) = (l-e"^l^^^l)e^l^l (4) 

and also 

PB,.,. < e-l^-^^^^'^^l + / pji[u)du 

Ju£D^nB(v,s) 

SO that 



g-A|AuC|. -ISIrf^ 



HEb,s,t) < e"""' + 2r(2r + 2s) ( e-P.ns{„,«)| ^ f f^^ 

(5) 
and the right hand side can be minimized over all r and s, with A fixed. The 
result is shown in Table 1, in row B. 

The calculation for the cases U and O is exactly analogous, using the graphs 
Gsec and Gsec respectively. The analogues of ^ are 

pv{u) = (1 - e-^l^l - e-^l*^! + e-^l^^^l)e-l^l (6) 

and 

Po(^) = (l-e-^l^l)e-l^l (7) 

respectively, and the natural analogue of ([5]) applies. The results of the opti- 
mization are shown in Table 1. 

As proved in [2], the bound for Aq in fact applies to As and Aj as well (see 
[2] for a proof). In conclusion, we have proved the following theorem. 
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X 


A 


r 


s 


P 


u 


0.002 


1.659 


3.15 


0.0669 


o 


0.0008 


1.658 


3.15 


0.0677 


B 


0.0005 


1.657 


3.15 


0.0680 



Table 1: Upper bounds on p = minr,s P(£'x s t)- (^11 values of p rounded up.) 



Theorem 17. Au > 0.002, Ao > 0.0008, Ai > 0.0008, As > 0.0008 and Ab > 0.0005. 



3.4 High confidence results ([2J) 

This method gives both upper and lower bounds for percolation thresholds in 
the fc-nearest neighbour model. It involves computing a certain high dimensional 
integral using Monte Carlo methods, and so is not fully rigorous. The approach 
carries over essentially completely for the secrecy graph. 

The lower bound method (corresponding to the upper bound method for the 
fc-nearest neighbour model) may be summarized as follows. Given a trial value 
of A, which we wish to show is a lower bound on one of the percolation thresholds 
Au, Ao or Ab, we choose trial values of r and s. Then we generate a random 
instance oiVUV' inside SUT and test for the following conditions: i) for more 
than half of the black points v £ K, there are paths (in GsccGscc or G'^^^ for 
the cases X = U, O, B) to more than half the black points in M, regardless 
of the state oi V UV outside S UT; ii) for more than half of the black points 
V e A/, there are paths to more than half the black points in K, regardless of the 
state oiV UV' outside SUT. As before, it is clear that this is a 1-independent 
model on the bonds joining adjacent squares, and that percolation in this model 
implies percolation in the original one. Consequently, if these conditions hold 
with probability at least 0.8639, then percolation occurs. The condition that 
the path should be independent of the process outside 5 U T is simply obtained 
by ignoring any edges of WW e -E(Gscc('5'ur)) where |ju — w|| > dist{u,d{SUT)), 
since only edges uv with \\u — v\\ < dist(u, d{S U T)) are guaranteed to exist in 

The probability that conditions i) and ii) are satisfied can be expressed as 
a complicated multiple integral, whose value we would like to be greater than 
0.8639, for some r and s. This is the integral we estimate using Monte Carlo 
methods. Using a computer program we generated many instances, and counted 
the proportion of times these conditions held. From these we calculated the 
confidence level, i.e., the probability p that these results (or better) could be 
obtained, if the true value of the integral was less than 0.8639. In all cases p 
was less than 10~^^: the detailed results appear in Table 2. It turns out that 
the method for the X = O case actually applies to the cases X = S and X = I 
as well, and the results obtained are as follows. 



Theorem 18. With high confidence, Ab 
0.11 and Au > 0.20. 



> 0.09, Ao > 0.11, Ai > 0.11, As > 
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Figure 2: Forbidden path for upper bound method 



The upper bound method (corresponding to the lower bound method for 
the A;-nearest neighbour model) is as follows. For suitable r and s, we generate 
instances of V and 'P' in S" U T, and check whether, regardless of the state 
of the processes outside S LiT, there is no path (in GsecGsec or G'^^^ for the 
cases X = U, O, B) from outside S U T that crosses the line segment joining 
the center of S to the center of T (see Figure ^ . We define a 1-independent 
percolation model on Z^ by declaring an edge open if this condition holds for the 
corresponding rectangle SUT. If an edge is open with probability at least 0.8639, 
then, from Theorem ll6[ there are open cycles surrounding any bounded region of 
the plane. Consequently, if there was an infinite X-component starting in some 
such bounded region, it would have to cross an open cycle, and in particular 
cross the central line segment in one of the rectangles S UT corresponding to 
an open edge in this cycle. This contradicts the condition for that edge to be 
open, and so percolation cannot occur if the edges are open with probability at 
least 0.8639. 

It remains to specify how we tested whether an edge of a path (in Gsoc, Gscc 
or Ggj,^ for the cases X = U, 0,B) could come from outside 5 U T to some 
V G S U T. In these cases, we must find possible neighbours within 5 U T of 
every possible point outside SUT. To do this, we used the following algorithm. 
We mark all the black points falling in a certain region R', determined by the 
red points, as possibly having edges from outside S Li T. First we define the 
subset R C R' to he the union of various half-discs Ri, described as follows. 
A point X moving along the boundary of S' U T has, at almost every position, 
exactly one nearest neighbour in V' O {S U T). At some places, there will be a 
tie for the nearest neighbour of x, so that ||a; — a\\ — \\x — b\\ for some points 
a,b G v. Draw the disc through a and b and centered at x, and let Ri he the 
intersection of this disc with S UT. R is just the union of all such regions Ri, 
and R' is the union of R together with the regions at the corners of S' U T which 
lie outside the Ri (see Figure ^ . 

To check that this method works, suppose that there is an edge x|/ e E{Gsec), 
where x ^ S UT and y e {S UT)\ R. Let u be the point on d{S U T) on the 



17 




Figure 3: Some discs used in the construction of R 



line joining x and y. 
B{x, \\x — y||), since 



Then, if B{u, \\u — y\\) contains a red point a, so does 



ll^; — a|| < llx — u|| + ||u — ajl < llx — u|| + | 



y\\ 



y\ 



so that it is enough to assume that x = u. Moreover, let v be the point on dR 
on the line joining u and y. If B{u, \\u — v\\) contains a red point b, so does 
B{u, \\u — 2/11), since B{u, \\u — y\\) contains B{u, \\u — v\\). Hence we may also 
assume that y — v. Now, with u fixed, we may assume that v is the closest point 
of dR to u, which we may also assume does not coincide with the location of a 
red point. Draw the disc B{u, \\u~ v\\). By construction, this disc is tangent to 
one of the half-discs Ri, centered at z, say, and has a strictly smaller radius than 
that of Ri, with probability 1. Therefore, its center, u, lies in the interior of the 
line segment joining z to v. Consequently, u € S* U T, which is a contradiction. 
Figure [3] shows that the three conditions i) v is the closest point of dR to u 
ii) \\u — v\\ < min(||M — a\\, \\u — b\\) and iii) u € d{S U T) are incompatible, by 
illustrating a typical situation where i) and ii) are satisfied. 

The results of these simulations are also shown in Table 2, and so we have 
the following result. 



Theorem 19. With high confidence, Ab 
0.17 and Au < 0.27. 



< 0.13, Ao < 0.17, Ai < 0.17, As > 
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X 


bound 


value 


r 


s 


successes 


trials 


confidence 


u 
o 

B 


lower 
lower 
lower 


0.20 
0.11 
0.09 


90 
60 
80 


10 




1480 
963 
2159 


1500 
1000 
2250 


10-25 

10-^1 


u 
o 

B 


upper 
upper 
upper 


0.27 
0.17 
0.13 


110 
110 
125 







4296 
3689 
6226 


4600 
4000 
6750 


10-^^ 
10-25 

10-45 



Table 2: Results of Monte-Carlo simulations. (All confidences rounded up.) 

4 Uniqueness of the infinite cluster 

Uniqueness of the infinite cluster above the percolation threshold was proved by 
Harris [12] for bond percolation in 1? , by Aizenman, Kesten and Newman [1] 
for connected, transitive and amenable graphs, by Meester and Roy [13] for the 
Gilbert model, and by Haggstrom and Meester [10] for the fc-nearest neighbour 
model. The last two results were obtained by modifying a very short and elegant 
argument of Burton and Keane [^ , which was originally applied to give a second 
proof of the Aizenman-Kesten-Newman theorem. The Burton-Keane argument 
goes through for the secrecy graph, with a considerably simpler proof than 
in [10| . Before presenting it, we make a few preliminary remarks. 

There are three main ingredients in proving the uniqueness of the infinite 
cluster. One is ergodicity, which allows us to show that the number of infinite 
components is almost surely constant (this constant might be cxd). The second is 
the local modifier, which works as follows. Suppose we know that some event E 
occurs with positive probability. Suppose also that, by removing a finite number 
of points from any instance oiV UV in which E occurs, we get a configuration 
in which some other event F always occurs. Then also F{F) > 0. This is 
proved using coupling. The third ingredient is the trifurcation argument, which, 
roughly speaking, shows that the probability of having some infinite component 
with three distinct "branches" going off to infinity is zero. Since the ergodicity 
and trifurcation arguments are fairly standard (see [H |9l [14] for instance) , we 
will simply state their implications, without proof, and concentrate on the local 
modifier. 

To keep things simple, we will focus on the case X = B. In other words, we 
will work with the graph Gg^c of bidirectional edges. From now on, we will call 
this graph G. Versions of the result, with almost identical proofs, exist for the 
cases X = U and X == S; when X = I or X = O, things are more complicated, 
since two maximal infinite components might intersect. 

First then, we describe precisely the respective end results of the ergodicity 
and trifurcation arguments. 

Lemma 20. For each value of d, and for each A > 0, the number of infinite 
components in the graph G — G'^^^ is almost surely constant. (This constant 
might be oo.) 
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Lemma 21. Pick r > and x G i?"*. Let T{x,r) be the event that the ball 
B{x, r) is intersected by an infinite component C ofG — G'^^^ in such a way that, 
if all edges of C intersecting B{x,r) are removed, C falls apart into a number 
of infinite components, of which at least three are infinite. ThenP(T{x,r)) = 0. 

We next describe a useful coupling. Let Vi and V2 be two independent 
Poisson processes of intensity 1 in R'', and let V'l and Vl^ be two independent 
Poisson processes of intensity A, also in M.'^. Given R > 0, construct two more 
processes V3 and Pg as follows. Outside B{0, 3R), let V3 and V^ coincide with 
Vi and V'l respectively. Inside B{0, 3R), for V3, include each point of Vi U V2 
with probability i , and for V'^ , include each point of V'l U 7^2 with probability 
i. Then P3 and V^ are both Poisson processes in R'', of intensities 1 and A, 
respectively. This coupling will be referred to, following '101, as the special 
coupling. It shows that, if an event E occurs for an instance (7^i,7^(), and if 
an event F can be made to occur by removing some points of (Vi , V[ ) inside 
B{0,3R), then P(£') > ^ P(F) > 0, since the modified instance occurs with 
positive probability for ('Pi,'p2,'P(,'p2)- Its first application will be in the proof 
of the following lemma. 

Lemma 22. For each value of d, and for each A > 0, the number of infinite 
components in the graph G — G'^^,, is either almost surely 0, almost surely 1, or 
almost surely cx). 

Proof. By Lemma [20l we only have to show that, for each fixed fc > 2, it is 
not the case that G has, almost surely, exactly k infinite components. Suppose 
then, that, for some fc > 2, G has, almost surely, exactly k infinite components. 
For some r > 0, the probability that each of these components Ci,...,Gk 
intersects -6(0, r) is strictly positive. Given some configuration in which all k 
infinite components Ci,...,Gk intersect B{0,r), remove all the red points in 
B{0, 3r). The effect of this is that the k components Ci, . . . ,Gk merge to form 
a single infinite component. However, using the special coupling, this shows 
that the probability of having a single infinite component is strictly positive, 
contradicting Lemma BUI D 

We are now ready for our final theorem. 

Theorem 23. For each value of d, and for each A > 0, the number of infinite 
components in the graph G = G'^^^ is either almost surely 0, or almost surely 1. 

Proof. In this proof we may assume that A > Ac, so that there is at least one 
infinite component, almost surely. 

Suppose that, almost surely, G has infinitely many infinite components. 
Then there exists an r > such that, with probability at least 0.99, at least three 
infinite components intersect B{0,r). If r is large enough, one can also show, 
by the argument in the proof of Theorem[21 that, based on V' D B{0, 3r)'~^ , with 
probability at least 0.9, there can be no edge from V n -6(0, 4r)'-^ to P n -6(0, 3r) 
in G. In other words, the red points outside -8(0, 3r) by themselves prevent 
an edge of G from crossing the annulus B{0,Ar) \ B{0,3r). This also implies 
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that G n B{0,4:r)'~'' is unaffected by the red points inside B{0,3r). Now let 
Ci,C2 and C3 be three of the infinite components intersecting B{0,r). First, 
remove aU black points not in these components from inside i?(0,4r). Second, 
remove all the red points from B{0,3r). The effect of this is that Ci,C2 and 
C3 merge into a single infinite component C, while none of the other infinite 
components merge with C. But, in the new configuration, which has positive 
probability of occurring (by the special coupling), r(a;,4r) occurs. This contra- 
dicts Lemma [m D 

5 Concluding Remarks 

We have presented several methods to calculate bounds on five percolation 
thresholds in the Poisson secrecy graph. While the rigorous bounds are still 
rather loose, the high-confidence lower bounds derived here are much tighter. 
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